Privacy Policy

Last updated: September 21, 2025

This Privacy Policy explains how Education Management Institute EOOD (“the Operator”, “we”, “us”) collects, uses, stores, and protects the personal data of users (“you”, “the user”).

1. Data Controller

Education Management Institute EOOD
Website: https://edumanagement.institute
Email: dpo@edumanagement.institute
Phone: +359 885 365 138

2. What Data We Collect

Depending on your interaction with our website or services, we may collect:

  • Name and surname
  • Email address
  • Order and document-related information (e.g., file names, billing data, order ID)
  • Technical data (IP address, cookies, access logs)

3. Purposes and Legal Grounds

We process your data only for legitimate purposes and with a legal basis:

  • Service provision and contract performance – to process your orders, generate download links, and allow access to purchased documents (Art. 6(1)(b) GDPR).

  • Legal obligations – to archive documents and invoices as required by applicable accounting and tax laws (Art. 6(1)(c) GDPR).

  • Direct marketing and commercial communications – only with your explicit consent (Art. 6(1)(a) GDPR). You can choose to consent separately to:

    • receiving offers from us,

    • having your data (name, email) shared with our partners for commercial communications.

You can withdraw your consent at any time, free of charge, via the unsubscribe link in emails or by contacting us at dpo@edumanagement.institute.

4. Data Sharing with Third Parties

Your data may be shared with:

  • Service providers (hosting, payments, email delivery, IT services), only under Data Processing Agreements (DPAs) in accordance with Art. 28 GDPR.
  • Commercial partners, only if you have explicitly opted in for this purpose.

We do not sell or transfer your personal data to third parties without a legal basis or your explicit consent.

5. Data Retention

  • Download links: valid for 3 days from generation. After expiration, related temporary data is deleted.
  • Order and document-related data: retained for the duration of the contract and in compliance with accounting/tax legislation (minimum 5 years, as required by law).
  • Marketing data: retained until consent is withdrawn or for a maximum of 3 years from collection.

6. Your Rights

Under the GDPR, you have the right to:

  • Access your data
  • Rectify your data
  • Request erasure (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing (including direct marketing)
  • Withdraw consent at any time

To exercise your rights, please contact us at dpo@edumanagement.institute.

You also have the right to lodge a complaint with your local Data Protection Authority.

7. Data Security

We implement appropriate technical and organizational measures to safeguard your data, including access controls, encryption, backups, and internal policies.

Education Management Institute EOOD is certified under:

  • ISO/IEC 27001:2018 – Information Security Management System
  • ISO/IEC 27701:2021 – Privacy Information Management

8. Marketing Consent

When signing up, you can give your explicit consent for marketing by ticking one or more checkboxes:

  • “I agree to receive commercial communications from Education Management Institute EOOD.”
  • “I agree that my data (name, email) may be shared with partners of Education Management Institute EOOD for marketing purposes.”

These options are not pre-ticked and are entirely based on your choice.

9. Contact

For any questions regarding data protection, please contact us:
Email: dpo@edumanagement.institute
Phone: +359 885 365 138